This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: swUpSwpXYvrPdK6+V1F1IL8y9FoxThYisg3+PYwsO4U= Subject key identifier: 70:42:73:85:36:2C:1B:49:75:7D:50:B6:EC:10:4C:7E:24:E7:77:8C Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 04A5 Signing time: Sat 06 Dec 2025 22:40:46 +0000 Manifest this update: Sat 06 Dec 2025 22:40:46 +0000 Manifest next update: Sat 13 Dec 2025 22:40:46 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: s+C1z+8RxSAG/vrSfm0tBCAJQvooSXUqFUDJ0WTRpv4=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Dec 6 22:40:46 2025 GMT Not After : Dec 13 22:40:46 2025 GMT Subject: CN=6934b0ee-b8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:b8:b9:98:06:47:0b:2e:df:8d:f2:dd:a6: 15:27:2b:5e:b8:7a:00:f2:6d:83:26:c5:d9:cb:ca: 4a:44:fe:65:3e:6e:27:d5:45:fd:b6:c3:f7:bf:6d: 47:18:b6:fd:bc:b7:7c:65:c0:29:3a:ee:b7:ed:a6: 5c:29:62:d6:10:53:31:f8:0c:94:84:30:38:03:98: 3c:d5:c0:14:9b:f1:e1:46:b5:56:fa:af:ca:bd:27: 1d:2a:49:62:97:23:5c:34:06:bf:57:92:32:71:34: 8b:4f:03:f8:eb:ea:b1:7b:d8:b8:69:b4:69:bc:f1: 86:9d:17:3d:0a:b9:83:b9:27:a0:be:cd:28:0d:83: dc:ae:26:cc:3d:3b:d2:1c:58:0d:34:7b:ac:2e:d9: 43:89:62:b8:f2:7a:25:b7:23:cc:ff:7c:37:2e:15: 8d:e5:3d:eb:28:cb:ef:9e:32:40:e2:2f:82:dc:4e: ce:b2:d9:3b:8f:8c:f1:cc:1d:8e:09:b2:e9:cf:bd: e9:07:c1:ab:f1:de:8d:e1:b0:4d:09:ee:99:7b:59: 9e:0e:a9:47:a8:17:26:42:ed:e2:e7:8c:dd:2a:26: e5:f6:a5:73:42:95:c9:71:70:47:e9:df:22:87:dc: 2d:61:99:af:b7:0b:7b:bf:73:81:c2:97:cb:4f:c9: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:42:73:85:36:2C:1B:49:75:7D:50:B6:EC:10:4C:7E:24:E7:77:8C X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:58:50:3a:09:39:41:7c:3a:23:02:77:ac:b4:f9:67:b8:75: 46:d2:ae:3b:8a:13:f2:d8:d3:15:12:14:54:35:e7:9f:fc:62: 61:ab:cf:2c:6f:d9:a1:4d:8c:06:d3:04:ec:c0:87:fa:01:6e: 4f:01:b4:bb:f5:28:ed:17:f9:a6:7a:9d:65:18:69:46:c3:e3: 97:b2:27:7b:33:63:80:25:f0:c8:4e:82:6c:a5:20:50:e8:65: 9e:ac:4f:52:65:29:ba:d5:dd:24:7d:ea:94:58:2a:d3:ec:3c: a2:09:4e:0b:f5:a7:a3:44:10:23:93:ca:2d:b4:fb:7b:d2:fd: be:7d:53:4d:96:7d:dd:f0:a0:d4:cb:68:e5:3b:85:99:23:ee: c3:9f:a5:c5:ef:06:87:61:06:94:cf:d0:75:31:6a:67:13:7c: 44:a8:f2:d6:3e:41:0f:ad:e6:fc:d8:9c:21:8a:68:e0:f8:8c: 47:e7:db:06:86:36:4d:ce:f5:0a:2c:22:df:b6:24:1d:0e:ce: fc:e1:95:7a:b7:6c:f4:9f:fa:10:11:a4:f1:60:4e:9c:de:0e: 24:ec:8a:c7:9a:dc:c8:91:cc:b2:6b:b9:c0:29:63:2f:56:2c: a6:3f:ab:7c:3a:13:be:c8:a2:d3:18:e2:35:a4:68:56:e2:a1: f5:c5:aa:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUxMjA2MjI0MDQ2WhcNMjUxMjEzMjI0MDQ2WjAYMRYwFAYD VQQDEw02OTM0YjBlZS1iOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1X+4uZgGRwsu343y3aYVJyteuHoA8m2DJsXZy8pKRP5lPm4n1UX9tsP3v21H GLb9vLd8ZcApOu637aZcKWLWEFMx+AyUhDA4A5g81cAUm/HhRrVW+q/KvScdKkli lyNcNAa/V5IycTSLTwP46+qxe9i4abRpvPGGnRc9CrmDuSegvs0oDYPcribMPTvS HFgNNHusLtlDiWK48noltyPM/3w3LhWN5T3rKMvvnjJA4i+C3E7Ostk7j4zxzB2O CbLpz73pB8Gr8d6N4bBNCe6Ze1meDqlHqBcmQu3i54zdKibl9qVzQpXJcXBH6d8i h9wtYZmvtwt7v3OBwpfLT8ktswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBCc4U2 LBtJdX1QtuwQTH4k53eMMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcWFA6CTlBfDojAnestPlnuHVG0q47ihPy2NMVEhRUNeef/GJhq88s b9mhTYwG0wTswIf6AW5PAbS79SjtF/mmep1lGGlGw+OXsid7M2OAJfDIToJspSBQ 6GWerE9SZSm61d0kfeqUWCrT7DyiCU4L9aejRBAjk8ottPt70v2+fVNNln3d8KDU y2jlO4WZI+7Dn6XF7waHYQaUz9B1MWpnE3xEqPLWPkEPreb82Jwhimjg+IxH59sG hjZNzvUKLCLftiQdDs784ZV6t2z0n/oQEaTxYE6c3g4k7IrHmtzIkcyya7nAKWMv ViymP6t8OhO+yKLTGOI1pGhW4qH1xaqn -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:42 2025 by rpki-client